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DETAILED ACTION 


Claim Rejections - 35 USC §103 


The following is a quotation of 35 U.S.C 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1 and 5-17 are rejected under 35 U.S.C. 103(a) as being unpatentable over Curry 
et al (6,233,234 Bl) in view of Bissell et al (6,574,730). 

In reference to claim /, Curry discloses local communication links (column 5 lines 1-10) 
that include a plurality of separately located central office switching system inter connected via 
trunk circuits for selectively providing switched call connection links in response to 
predetermined control data messages (column 7 lines 54-24). Curry discloses the use of the SS7 
network (column 8 lines 26-39). In that case the plurality of central office switching systems 
would be enabled to talk to each other using a singling communication system for two-way 
communications of said control data messages between the central office switching system, said 
signaling communication system interconnecting the central office switching systems. 
Regarding the signaling gateway, separate from the central office switching systems and 
connected to said signaling communications system, said signaling gateway including an 
interface connected to a remote communications said remote communication network and said 
signaling communication system (Figure 1 part 54). The PSTN gateway (part 54) connects one 
or more central offices to the public switching telephone network region (column 14 lines 51- 
60). As shown in the figure the gateway is separate from the central office switching system. 
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Although Curry discloses sending messages securely on the network using a security 
server (part 51 on Fig. 6) (column 5 line 64 to column 7 line 14), Curry does not disclose the 
signaling system security monitor configured to evaluate an encrypted portion of said control 
data messages so as to authenticate corresponding ones of said control messages and, in 
response, determine if said control data messages are proper. 

Bissell discloses a signaling system security monitor (security node) that is separate form 
the central office switching system (local exchange) (column 6 lines 33-45). The security node 
is configured to evaluate an encrypted portion of said control data messages (authentication 
code) so as to authenticate the message (column 5 lines 15-65 in combination with column 6 
lines 28-33). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to authenticate the messages as in Bissell in the system of Curry. One of ordinary 
skill in the art would have been motivated to do this because the system would remove the call 
set-up procedure carried out by the customer, which would remove the inconvenience form the 
customer. 

In reference to claim 5, wherein said signaling system security monitor is configured to 
selectively communicate said control data messages between said signaling gateway and said 
signaling communication system in response to said encrypted portions of said control data 
messages. 

Bissell discloses a system wherein the messages are selectively communicated in 
response to the encrypted portions of the control data messages (authentication code). The 
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customer call is only allowed to proceed in the normal way if the authentication process is 
positive (column 5 line 65 to column 6 line 12). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to authenticate the messages as in Bissell in the system of Curry. One of ordinary 
skill in the art would have been motivated to do this because the system would remove the call 
set-up procedure carried out by the customer, which would remove the inconvenience form the 
customer. 

In reference to claim 6, wherein said signaling system security monitor is configured to 
selectively enable and inhibit said signaling gateway from exchanging said control data messages 
between said remote communication network and said signaling communication system in 
response to said encrypted portions of said control data messages. 

Bissell discloses a system wherein the messages are selectively communicated in 
response to the encrypted portions of the control data messages (authentication code). The 
customer call is only allowed to proceed in the normal way if the authentication process is 
positive (column 5 line 65 to column 6 line 12). Bissell also discloses inhibiting the 
communication after a number of attempts (column 6 lines 28-33). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to authenticate the messages as in Bissell in the system of Curry. One of ordinary 
skill in the art would have been motivated to do this because the system would remove the call 
set-up procedure carried out by the customer, which would remove the inconvenience form the 
customer. 
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In reference to claim 7, wherein said signaling system security monitor includes a 
memory storing states of respective ones of said central office switching system, said processor 
additionally responsive to said states for determining if said control messages are proper. 

Curry does not expressly disclose using states to determine if the control messages are 

proper. 

Bissell discloses operation of a telephony service may be modeled in terms of a sequence 
of states a call may go through. Bissell uses the off-hook condition to define when and how 
authentication is initiated (column 8 lines 9-50); and therefore when the control messages are 
proper. 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the call model as in Bissell in the system of Curry. One of ordinary skill in 
the art would have been motivated to do this because this would provide a means to know when 
an error has occured. 

In reference to claim 5, the gateway is configured to convert form SS7 type message to 
another packet data format, IP packets for the Internet (Curry Fig. 1 part 54 and 58). 

In reference to claim 9, the other packet data format is IP format (Curry Fig. 1 part 54 
and 58). 

In reference to claim 10, regarding the security monitor configured to monitor at least 
one of (i) a destination point code, (ii) an originating point code, and (iii) a service indicator 
(column 19 line 61 to column 20 line 33). Curry discloses monitoring the destination address to 
select which destination to send to. 
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In reference to claim 11, wherein said signaling system monitor is configured to monitor 
at least one of SCCP, ISUP, TCAP, and AIN messages. The messages transmitted in the system 
disclosed by Curry include AIN and TCAP messages (column 8 lines 26-39). 

In reference to claim 12, wherein said signaling system security monitor is configured to 
monitor calling and called party address parameters contained in SCCP message portions of said 
control data messages and determine if said monitor calling and called party address parameter 
are consistent with an authorized signaling relationship. Curry discloses extracting the address 
or number of the requesting terminal and the designation that the terminal device has identified 
for translation (column 18 lines 54-63). The system then selectively routes the communication 
depending on the RCR (column 19 lines 42-60). 

In reference to claim 13, wherein said signaling system security monitor is configured to 
monitor calling and called party address parameters contained in an SCCP message portion of 
said control data message. Curry discloses monitoring the calling and called party address 
parameters, which can be placed in he signaling connection control part (column 19 lines 42-60). 

In reference to claim 14, wherein said signaling system security monitor is configured to 
monitor origination and designation point codes and calling and called party address parameters 
contained in a TCAP message portion of said control data messages (column 8 lines 26-50). 

In reference to claim 15, wherein said signaling system security monitor is configured to 
monitor origination and designation point codes and calling and called party address parameters 
contained in a TCAP message portion of said control data messages (column 8 lines 26-50). The 
system then determines if a particular destination point code is authorized to send a particular 
TCAP message to a particular destination point code (column 19 lines 42-60). 
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In reference to claim 16, wherein said signaling system security monitor includes a 
memory storing state of communication network. 

Curry does not expressly disclose storing states of the communication network. 

Bissell discloses operation of a telephony service may be modeled in terms of a sequence 
of states a call may go through. Bissell uses the off-hook condition to define when and how 
authentication is initiated (column 8 lines 9-50); and therefore when the control messages are 
proper. The states would have to be stored for the authentication process to know what to send 
next. 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the call model as in Bissell in the system of Curry. One of ordinary skill in 
the art would have been motivated to do this because this would provide a means to know when 
an error has occurred. 

In reference to claim 17, wherein said signaling system security monitor includes a 
memory storing permissible states of said communications network and rules for transitioning 
form each of said permissible states to others of said permissible states. 

Curry does not expressly disclose storing states of the communication network. 

Bissell discloses operation of a telephony service may be modeled in terms of a sequence 
of states a call may go through. Bissell uses the off-hook condition to define when and how 
authentication is initiated (column 8 lines 9-50); and therefore when the control messages are 
proper. The states would have to be stored for the authentication process to know what to send 
next. The steps taken for the authentication to be positive imply the rules for transition from one 
state to another. 
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At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the call model as in Bissell in the system of Curry. One of ordinary skill in 
the art would have been motivated to do this because this would provide a means to know when 
an error has occurred. 

Claims 2-3 are rejected under 35 U.S.C. 103(a) as being unpatentable over Curry and 
Bissell as applied to claim 1 above, and further in view of Sawyer et al (6,324,271 Bl). 

In reference to claim 2, Curry and Bissell do not disclose a system wherein the security 
monitor comprises a certification agent configured to exchange and maintain encryption key 
certificates. 

Sawyer discloses an authentication server on an SS7 network (Fig. 1 part 80) that is 
configured to exchange and maintain encryption key certificates (column 5 lines 27-33). Sawyer 
teaches that the system uses the X.509 protocol. The X.509 is a digital certificate that is 
distributed in order to authenticate the user. 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use digital certificates as in Sawyer in the system of Curry. One of ordinary 
skill in the art would have been motivated to do this because digital certificates assert that the 
specific token is linked to a unique person at a specific time and date. 

In reference to claim 3, wherein the signaling system security monitor is configured to 
issue and decrypt digital time stamps. 

Curry and Bissell do not disclose the use of digital time stamps. 

Sawyer discloses the use of digitally signed time-stamp (column 5 lines 40-47). 
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At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use digital time-stamps as in the system of Sawyer in the system of Curry. One 
of ordinary skill in the art would have been motivated to do this because it would protect against 
certificate replay. 

Claims 4 are rejected under 35 U.S. C. 103(a) as being unpatentable over Curry and 
Bissell as applied to claim 1 above, and further in view of Arkko et al (20020052200 Al). 

In reference to claim 4, Curry and Bissell do not disclose the use of a digital certificate 
issuing authority. 

Arrko discloses the use of a Key Administration center that performs the duties of a 
digital certificate issuing authority on an SS7 Network (page 3 paragraphs 0035-0037). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use digital certificate issuing authority as disclosed by Arrko in the system of 
Curry. One of ordinary skill in the art would have been motivated to do this because certificate 
authorities provide assurance of the identity of the key holder and therefore increase the security 
of the system. 

Claims 18-24 rejected under 35 U.S.C. 103(a) as being unpatentable over Curry and 
Bissell as applied to claim 1 above, and further in view of Hanson et al (6,014,427). 

In reference to claim 18, wherein said signaling system security monitor includes a 
memory storing data relating call progress status with respective sets of control messages 
appropriate to initiate a next action consistent with a particular service. 
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Curry and Bissell do not storing data relating call progress status with respective sets of 
control messages appropriate to initiate a next action consistent with a particular service. 

Hanson discloses a voice mail messaging system wherein the system stores messages 
depending on the progress of the call (Fig. 4). The user can prompt the caller so as to initiate a 
next action, the action would lead to the service associated with the prompt (column 4 lines 40- 
50). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to relate cal progress status with the respective sets of control messages as in 
Hanson in the system of Curry. One of ordinary skill in the art would have been motivated to do 
this because the user would be allowed to custom the message on the system. 

In reference to claim 19, wherein the signaling system security monitor includes a 
memory storing a plurality of message templates. 

Curry and Bissell do not disclose storing a plurality of message templates. 

However, Hanson discloses a system wherein the user can store a plurality of message 
templates (Fig. 4A part 406). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to relate cal progress status with the respective sets of control messages as in 
Hanson in the system of Curry. One of ordinary skill in the art would have been motivated to do 
this because the user would be allowed to custom the message on the system. 

In reference to claim 20, the messages disclosed by Hanson are dependent on the user 
and therefore the user may refer to a plurality of service providers, wherein each provider is 
represented by a prompt. 
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In reference to claim 21, the action messages allow the user to relate a prompt with a 
message; therefore each service provider would correspond to a message and the caller would 
chose a prompt as shown in Hanson for the action to be taken. 

In reference to claim 22, wherein said signaling system security monitor includes a 
memory storing sets pf templates, each of said sets corresponding to control messages 
appropriate to particular call progress flow. 

Curry and Bissell do not storing sets pf templates, each of said sets corresponding to 
control messages appropriate to particular call progress flow. 

Hanson discloses a voice mail messaging system wherein the system stores messages 
depending on the progress of the call (Fig. 4). The user can prompt the caller so as to initiate a 
next action, the action would lead to the service associated with the prompt (column 4 lines 40- 
50). The progress of the call would correspond to the progress flow. 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to relate cal progress status with the respective sets of control messages as in 
Hanson in the system of Curry. One of ordinary skill in the art would have been motivated to do 
this because the user would be allowed to custom the message on the system. 

In reference to claim 23, Curry discloses a system wherein the message format is AIN 
and TCAP (column 8 lines 26-39). 

In reference to claim 24, the system disclosed by Hanson selects the message templates 
that relate to the message to play back to the caller in relation to the prompt. 

Claims 25-32 are rejected under 35 U.S.C. 103(a) as being unpatentable over Curry in 
view of Sawyer et al (6,324,271 Bl). 
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In reference to claim 25 \ Curry discloses a method of securely interfacing control links of 
respective communication networks, comprising the step of exchanging control messages 
between a remote communication network and a local signaling communication system (Fig. 1). 

However Curry does not disclose decrypting a certificate portion of said control messages 
so as to authenticate origination point code information; selectively communicating, in response 
to said decrypting step, control data messages between central office switching systems; and 
selectively providing switched call connections between at least two of the local communication 
links in response to predetermined control data messages. 

Sawyer discloses an authentication server on an SS7 network (Fig. 1 part 80) that is 
configured to exchange and maintain encryption key certificates (column 5 lines 27-33). Sawyer 
teaches that the system uses the X.509 protocol. The X.509 is a digital certificate that is 
distributed in order to authenticate the user. Sawyer discloses a digital signature; digital 
signatures are decrypted in order to authenticate the signature. This information is used to 
authenticate the terminal 10; and then therefore selectively provide the connection for the 
terminal 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use digital certificates as in Sawyer in the system of Curry. One of ordinary 
skill in the art would have been motivated to do this because digital certificates assert that the 
specific token is linked to a unique person at a specific time and date. 

In reference to claim 26, the gateway is configured to convert form SS7 type message, at 
the local network, to another packet data format, IP packets for the Internet (Curry Fig. 1 part 54 
and 58). 
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In reference to claim 27, the messages in the local network of Curry are SS7 complain 
message protocol (column 8 lines 26-40). 

In reference to claim 28, the other packet data format is IP format (Curry Fig. 1 part 54 
and 58). 

In reference to claim 29, wherein said signaling system security monitor is configured to 
monitor calling and called party address parameters contained in an SCCP message portion of 
said control data message. Curry discloses monitoring the calling and called party address 
parameters, which can be placed in he signaling connection control part (column 19 lines 42-60). 

In reference to claim 30, wherein said signaling system security monitor is configured to 
monitor calling and called party address parameters contained in SCCP message portions of said 
control data messages and determine if said monitor calling and called party address parameter 
are consistent with an authorized signaling relationship. Curry discloses extracting the address 
or number of the requesting terminal and the designation that the terminal device has identified 
for translation (column 18 lines 54-63). The system then selectively routes the communication 
depending on the RCR (column 19 lines 42-60). 

In reference to claim 31, wherein said signaling system security monitor is configured to 
monitor origination and designation point codes and calling and called party address parameters 
contained in a TCAP message portion of said control data messages (column 8 lines 26-50). 

In reference to claim 32, wherein said signaling system security monitor is configured to 
monitor origination and designation point codes and calling and called party address parameters 
contained in a TCAP message portion of said control data messages (column 8 lines 26-50). The 
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system then determines if a particular destination point code is authorized to send a particular 
TCAP message to a particular destination point code (column 19 lines 42-60). 

Claim 34 is rejected under 35 U.S.C. 103(a) as being unpatentable over Curry and 
Sawyer as applied to claim 25 above, and further in view of Bissell. 

In reference to claim 34, wherein said signaling system security monitor includes a 
memory storing state of communication network. 

Curry does not expressly disclose storing states of the communication network. 

Bissell discloses operation of a telephony service may be modeled in terms of a sequence 
of states a call may go through. Bissell uses the off-hook condition to define when and how 
authentication is initiated (column 8 lines 9-50); and therefore when the control messages are 
proper. The states would have to be stored for the authentication process to know what to send 
next. 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the call model as in Bissell in the system of Curry. One of ordinary skill in 
the art would have been motivated to do this because this would provide a means to know when 
an error has occurred. 

Claims rejected under 35 U.S.C. 103(a) as being unpatentable over Curry and 
Sawyer as applied to claim 25 above, and further in view of Hanson et al (6,014,427). 

In reference to claim 35, wherein said signaling system security monitor includes a 
memory storing data relating call progress status with respective sets of control messages 
appropriate to initiate a next action consistent with a particular service. 
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Curry and Sawyer do not storing data relating call progress status with respective sets of 
control messages appropriate to initiate a next action consistent with a particular service. 

Hanson discloses a voice mail messaging system wherein the system stores messages 
depending on the progress of the call (Fig. 4). The user can prompt the caller so as to initiate a 
next action, the action would lead to the service associated with the prompt (column 4 lines 40- 
50). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to relate cal progress status with the respective sets of control messages as in 
Hanson in the system of Curry. One of ordinary skill in the art would have been motivated to do 
this because the user would be allowed to custom the message on the system. 

In reference to claim 36, wherein the signaling system security monitor includes a 
memory storing a plurality of message templates. 

Curry and Bissell do not disclose storing a plurality of message templates. 

However, Hanson discloses a system wherein the user can store a plurality of message 
templates (Fig. 4A part 406). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to relate cal progress status with the respective sets of control messages as in 
Hanson in the system of Curry. One of ordinary skill in the art would have been motivated to do 
this because the user would be allowed to custom the message on the system. 

In reference to claim 37, the messages disclosed by Hanson are dependent on the user 
and therefore the user may refer to a plurality of service providers, wherein each provider is 
represented by a prompt. 
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In reference to claim 38 y the action messages allow the user to relate a prompt with a 
message; therefore each service provider would correspond to a message and the caller would 
chose a prompt as shown in Hanson for the action to be taken. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paula W Klimach whose telephone number is (703) 305-8421. 
The examiner can normally be reached on Mon to Thr 9:30 a.m to 5:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (703) 305-4393. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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